{"id":"CVE-2018-4041","aliases":["EUVD-2018-15827","GHSA-rhmf-ww55-v248"],"status":"published","title":"An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X,...","description":"An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input validation. An attacker with local access could exploit this vulnerability to modify the file system as root.","severity":{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-07","score":0.00309,"percentile":0.23859,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2019-01-10T15:00:00Z","modified":"2026-06-17T01:58:16Z","products":[{"vendor":"macpaw","product":"cleanmymac_x"}],"references":[{"url":"https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0715","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-4041"},{"url":"https://github.com/advisories/GHSA-rhmf-ww55-v248"}],"sources":{"cve":[{"id":"CVE-2018-4041","description":"An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input validation. An attacker with local access could exploit this vulnerability to modify the file system as root.","status":"published","published":"2019-01-10T15:00:00Z","modified":"2024-08-05T05:04:28.556Z","cvss":[{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","level":"high","assessor":"cna"}],"updated_at":"2026-11-02T14:35:08.341767Z"}],"euvd":[{"id":"EUVD-2018-15827","description":"An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input validation. An attacker with local access could exploit this vulnerability to modify the file system as root.","status":"published","published":"2019-01-10T15:00:00Z","modified":"2024-08-05T05:04:28Z","cvss":[{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-03T02:40:14.678776Z"}],"ghsa":[{"id":"GHSA-rhmf-ww55-v248","title":"An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X,...","description":"An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input validation. An attacker with local access could exploit this vulnerability to modify the file system as root.","status":"published","published":"2022-05-13T01:01:44Z","modified":"2023-01-27T05:02:07Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:42:01.451226Z"}],"nvd":[{"id":"CVE-2018-4041","description":"An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input validation. An attacker with local access could exploit this vulnerability to modify the file system as root.","status":"published","published":"2019-01-10T15:29:00.567Z","modified":"2026-06-17T01:58:16.413Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","level":"high","assessor":"secondary"},{"version":"2.0","score":4.9,"vector":"AV:L/AC:L/Au:N/C:N/I:C/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:04:53.079938Z"}]}}